Privacy Policy

We may collect, store, and use the following kinds of personal information to provide high-quality MEP and maintenance services:

• Device & Visit Data: Information about your computer/device and your visits to this website (including IP address, geographical location, browser type, length of visit, and page views).
• Transaction Data: Information relating to any purchases or bookings made on the Freshair.one platform, including AC maintenance, electrical, or plumbing service history.
• Registration & Profile Data: Information you provide when registering (Name, Email, Phone Number, and Physical Address).
• Technical Data: We collect Latitude and Longitude coordinates and home addresses to enable our technicians to locate your premises for service delivery.
• Communication Data: Information contained in or relating to any communication that you send to us (including WhatsApp chats, emails, and feedback).

Our website uses cookies to improve your experience.

• Session Cookies: Used to track you while you navigate the site and prevent fraud. These are deleted when you close your browser.
• Persistent Cookies: Used to recognize you upon return and remember your preferences.
• Analytics: We use Google Analytics to analyze website usage. Google's privacy policy is available at google.com/privacypolicy.html.

Personal information submitted to us will be used for purposes including:

• Service Delivery: Supplying the MEP services purchased via the platform and directing technicians to your location.
• Administration: Sending statements, invoices, and collecting payments.
• Communication: Sending non-marketing commercial communications (appointment confirmations) and requested email/SMS notifications.
• Marketing: Sending newsletters or marketing communications relating to our business where you have specifically agreed (you can opt-out at any time).
• Security: Keeping the platform secure and verifying compliance with our Terms and Conditions.

We may disclose your personal information:

• To our employees, officers, and subcontractors (technicians) insofar as reasonably necessary to perform the booked service.
• To any member of our group (Freshair Holding and its subsidiaries).
• To the extent required by UAE Law or in connection with any ongoing or prospective legal proceedings.
• Payment Processing: Financial transactions are handled through our secure payment services provider. We share data only to the extent necessary for processing payments and refunds.

• We take advanced technical and organizational precautions to prevent the loss or misuse of your data.
• All personal data is stored on secure, firewall-protected servers.
• All electronic transactions are protected by industry-standard encryption technology.
• User Responsibility: You are responsible for keeping your password and user details confidential.

• Access: You may request a copy of the personal information we hold about you (subject to identity verification).
• Correction: You may instruct us to correct or update any inaccurate information.
• Deletion: If you wish to have your data (Phone, Email, Address, or Location data) deleted, please email contact@freshair.one.
• Opt-out: You may instruct us at any time not to process your data for marketing purposes.

We may update this privacy policy from time to time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes.

Our platform may contain links to third-party websites. We are not responsible for the privacy policies or practices of third parties.

Under the EU General Data Protection Regulation (GDPR) and the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we process your personal data based on the following lawful grounds:

• Contractual Necessity: Processing required to fulfil a service booking, deliver MEP maintenance, process payments, or manage your account on Freshair.one.
• Legitimate Interest: Processing necessary for our legitimate business interests, including fraud prevention, platform security, service quality improvement, and internal analytics — provided these interests do not override your fundamental rights.
• Consent: Where you have given explicit consent, such as subscribing to marketing newsletters, enabling location services, or opting into promotional offers. You may withdraw consent at any time by emailing contact@freshair.one.
• Legal Obligation: Processing required to comply with UAE law, tax regulations, anti-money laundering requirements, or court orders.
• Vital Interests: In rare cases, processing may be necessary to protect someone's life or safety during an emergency service call.

In addition to the rights outlined in Section 6, you have the following rights under GDPR and UAE PDPL:

• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON). You may also request that we transmit this data directly to another service provider where technically feasible.
• Right to Restriction: You may request that we restrict the processing of your data while a complaint or dispute is being resolved.
• Right to Object: You have the right to object to processing based on legitimate interests or direct marketing at any time. We will cease processing unless we demonstrate compelling legitimate grounds.
• Right Not to Be Subject to Automated Decisions: You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects.
• Right to Lodge a Complaint: If you believe your data rights have been violated, you may lodge a complaint with the UAE Data Office or the relevant supervisory authority in your jurisdiction.

Freshair has appointed a Data Protection Officer to oversee compliance with GDPR, UAE PDPL, and all applicable data protection regulations.

The DPO is responsible for:

• Monitoring compliance with GDPR, UAE PDPL, and internal data protection policies
• Conducting Data Protection Impact Assessments (DPIAs) for high-risk processing
• Serving as the primary point of contact for data subjects and regulatory authorities
• Managing data breach notifications to the UAE Data Office within 72 hours where required
• Training staff on data protection best practices and obligations